From 1872e2b63d18ceaf4a4a4876c93e3784f8fa61b9 Mon Sep 17 00:00:00 2001
From: Jamie Hewland <jhewland@gmail.com>
Date: Thu, 1 Sep 2016 15:40:49 +0200
Subject: [PATCH] ACME: renew certificates 30 days before expiry, like the
 official certbot client

---
 acme/acme.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/acme/acme.go b/acme/acme.go
index e8e809bbc..3e39bd12d 100644
--- a/acme/acme.go
+++ b/acme/acme.go
@@ -152,8 +152,8 @@ func (dc *DomainsCertificate) needRenew() bool {
 			// If there's an error, we assume the cert is broken, and needs update
 			return true
 		}
-		// <= 7 days left, renew certificate
-		if crt.NotAfter.Before(time.Now().Add(time.Duration(24 * 7 * time.Hour))) {
+		// <= 30 days left, renew certificate
+		if crt.NotAfter.Before(time.Now().Add(time.Duration(24 * 30 * time.Hour))) {
 			return true
 		}
 	}